CompTIA CASP+ (CAS-003) — Question 80
A security analyst has requested network engineers integrate sFlow into the SOC's overall monitoring picture. For this to be a useful addition to the monitoring capabilities, which of the following must be considered by the engineering team?
Answer options
- A. Effective deployment of network taps
- B. Overall bandwidth available at Internet PoP
- C. Optimal placement of log aggregators
- D. Availability of application layer visualizers
Correct answer: D
Explanation
The correct answer is D because application layer visualizers are essential for interpreting the data collected by sFlow, enabling the SOC to gain insights into application performance and traffic patterns. The other options, while important for overall network monitoring, do not directly relate to the effectiveness of sFlow in enhancing monitoring capabilities.